Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: EN9v4Mrr98APhw9QOGsBjKfrem/uSzPyocjOgC+lOBM=
Subject key identifier: 1D:89:2A:27:0A:AB:61:D6:F2:BD:65:A3:E0:2D:AB:26:E8:25:7C:F4
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 019DA41D1ED3110836A1159BF848FDE302E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 0538
Signing time: Sun 19 Apr 2026 05:01:04 +0000
Manifest this update: Sun 19 Apr 2026 05:01:04 +0000
Manifest next update: Mon 20 Apr 2026 05:01:04 +0000
Files and hashes: 1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: APrU1+SOirTmMkP60Max1y/zbvt+gTZ78PKoRQ/pKs4=)
2: ujXjrHSBskkRtzQpgabT3c58RZQ.roa (hash: hcJwU6ySjyVPwOkpMUkEEZB++4hAYjO13djZi7l/+iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:1e:d3:11:08:36:a1:15:9b:f8:48:fd:e3:02:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Apr 19 05:01:04 2026 GMT
Not After : Apr 20 05:01:04 2026 GMT
Subject: CN=1d892a270aab61d6f2bd65a3e02dab26e8257cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:b6:a6:7e:4f:f6:ae:a8:40:7d:6d:e0:b7:
16:8c:50:a7:49:ff:c6:65:2f:1a:90:ee:d8:16:f5:
a1:85:1a:f0:51:d1:fd:be:02:b6:f3:db:e4:c1:cb:
b5:d1:7f:10:30:f1:3e:ac:e5:e0:94:6e:46:16:91:
9d:6c:ab:02:33:58:21:df:87:50:73:83:0d:03:c9:
ad:82:48:08:34:92:b5:a7:60:9e:b5:af:0e:1c:5b:
2b:ff:e8:ca:34:a9:da:f2:2b:72:f6:b8:77:fd:2e:
44:2d:f3:86:69:ea:d2:e6:fa:92:a1:84:02:9f:cb:
e1:56:7b:6d:35:69:16:5d:6f:64:42:da:2c:a2:42:
0f:fe:01:0c:3a:89:b7:3b:f0:8f:ee:63:0b:80:c2:
32:dc:c4:79:89:3e:ce:58:27:13:18:89:5f:28:87:
28:c8:60:a7:60:de:0d:46:1c:ba:86:66:06:52:ba:
ac:bd:16:97:f1:6e:52:db:86:ca:97:ec:4c:64:05:
1a:c3:d3:86:aa:24:55:fb:2b:99:5f:2d:8f:0a:7b:
b2:be:12:70:e7:4a:e9:e5:cb:37:fb:06:94:00:d3:
9b:26:9a:68:00:e7:ed:e5:72:58:76:4d:09:84:15:
9f:c0:af:10:b1:99:da:42:35:99:bf:11:8f:88:38:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:89:2A:27:0A:AB:61:D6:F2:BD:65:A3:E0:2D:AB:26:E8:25:7C:F4
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ba:de:ef:a5:d7:79:20:3e:bf:a1:46:90:43:d4:1f:b1:09:
dd:03:f2:47:79:12:db:26:7c:ac:1c:b2:4b:6e:05:f7:ce:13:
41:09:e6:35:3d:09:58:eb:e7:51:73:c4:06:ca:21:09:31:f1:
93:18:21:cc:33:21:0c:23:a4:f3:01:e8:6a:89:3b:65:4a:29:
2c:48:a3:7c:1e:a7:95:81:13:ae:5b:a3:f2:88:2b:b3:ef:ba:
a8:f3:f7:78:b2:c9:5c:a6:f4:f3:0f:15:3a:a6:5b:c1:89:d4:
bf:ab:39:96:da:24:a6:26:93:75:18:0f:63:42:a6:92:09:fa:
a3:4d:b5:49:8c:71:65:07:a7:39:ee:0a:e3:63:58:36:a5:e3:
5f:4d:33:bf:15:e4:8c:e5:6f:c1:56:60:d4:3e:45:ef:4b:6e:
3b:68:02:60:7f:3e:e8:2a:e6:a6:44:86:84:4b:5f:c8:e7:32:
5c:0d:2b:ee:51:2c:bb:49:13:72:b5:ae:12:dc:e0:00:8a:af:
50:73:7c:cc:f3:93:14:06:87:69:1e:36:c3:7d:86:c4:76:a0:
49:8e:5c:51:d7:57:5c:f4:32:4b:c2:ab:05:f3:04:a9:2b:31:
e1:14:83:b9:21:2a:fe:b1:5e:55:9e:39:f7:05:b1:4d:f7:67:
f9:66:7f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:16 2026 by rpki-client